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CLAIMS 

What is claimed is: 

1 . A method of communication in a network access system including an external 
processor and a programmable access device, said method comprising: 

transmitting a control message from the external processor to the 
programmable access device to establish a configuration of the programmable access 
device; and 

communicating messages from the programmable access device to the 
external processor for service processing in accordance with the configuration. 

2. The method of Claim 1, wherein: 

transmitting a control message comprises transmitting a filter control message 
to establish a configuration of a packet header filter in the programmable access 
device; and 

communicating messages comprises communicating network messages 
filtered from a packet flow by the packet header filter of the programmable access 
device . 

3. The method of Claim 2, and further comprising limiting communication of 
network messages from the programmable access device to the external processor by 
sending the programmable access device a message setting message interface flags in 
the programmable access device. 
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4. The method of Claim 1, wherein: 

transmitting a control message comprises transmitting a monitor control 
message to establish a configuration of a monitor in the programmable access device; 
and 

communicating messages comprises communicating reporting messages from 
the programmable access device to the external processor in response to the 
configuration of the monitor. 

5. The method of Claim 4, wherein transmitting a monitor control message 
comprises transmitting a control message to establish a threshold number of allowed 
retransmissions. 

6. The method of Claim 1 , wherein transmitting a monitor control message 
comprises transmitting a threshold activity level. 

7. The method of Claim 1 , wherein transmitting a control message comprises 
transmitting a policer control message to establish a configuration of a policer in the 
programmable access device. 

8. The method of Claim 1, wherein transmitting a control message comprises 
transmitting a forwarding table control message to establish a configuration of a 
forwarding table in the programmable access device. 
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9. The method of Claim 8, wherein establishing a configuration of a forwarding 
table comprises establishing a new forwarding table in the programmable access 
device. 

10. The method of Claim 1, wherein transmitting a control message comprises 
transmitting a control message to establish a configuration of a scheduler and one or 
more associated output buffers in the programmable access device. 

1 1 . The method of Claim 1 , wherein transmitting a control message comprises 
transmitting a shaper control message to establish a configuration of a shaper in the 
programmable access device. 

1 2. The method of Claim 1 , wherein: 

transmitting a control message from the external processor to the 
programmable access device to establish a configuration of the programmable access 
device comprises transmitting a control message specifying a source from which 
packets are not to be accepted; and 

the method further comprises dropping packets from the specified source by 
the programmable access device. 

1 3. The method of Claim 1 , and further comprising in response to service 
processing by the external processor, injecting a packet from the external processor 
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into packet flow through the programmable access device. 

14. The method of Claim 1, wherein 

transmitting a control message from the external processor to the 
programmable access device to establish a configuration of the programmable access 
device comprises transmitting a session deletion control message; and 

the method further comprises the programmable access device deleting a 
session specified by the session deletion control message. 

15. The method of Claim 1 , and further comprising the external processor 
signaling network hardware to establish a network connection in response to receipt 
of a message from the programmable access device. 

1 6. The method of Claim 1 , and further comprising exchanging keepalive 
messages between the external processor and the programmable access device. 

1 7. The method of Claim 1 , wherein transmitting a control message comprises 
accessing a control processor on the external processor via an application 
programming interface. 

1 8. The method of Claim 1 , and further comprising in response to said control 
message, sending an acknowledgement from said programmable access device to said 
external processor. 
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1 9. The method of Claim 1 , and further comprising communicating a state of a 
session from the programmable access device to the external processor in response to 
failure of a service controller servicing the session in the external processor. 

20. The method of Claim 1 , wherein transmitting a control message comprises 
transmitting a control message via an intermediate communication network. 

21. A network access system, comprising: 

an external processor that transmits a control message specifying a 
configuration; and 

a programmable access device that, responsive to the control message, 
establishes the configuration specified by the control message and communicates 
messages to the external processor for service processing in accordance with the 
configuration. 

22. The network access system of Claim 2 1 , wherein: 

the programmable access device includes a packet header filter; 

the control message comprises a filter control message that establishes a 
configuration of the packet header filter; and 

the messages communicated by the programmable access device comprise 
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network messages filtered from a packet flow by the packet header filter of the 
programmable access device . 

23. The network access system of Claim 22, said external processor comprising 
means for limiting communication of network messages from the programmable 
access device to the external processor by sending the programmable access device a 
message setting message interface flags in the programmable access device. 

24. The network access system of Claim 2 1 , wherein: 

the programmable access device comprises a monitor for network traffic; 

the control message comprises a monitor control message that specifies a 
configuration of the monitor; and 

the messages communicated by the programmable access device comprise 
reporting messages in accordance with the configuration. 

25. The network access system of Claim 24, wherein the control message 
specifies a threshold number of allowed retransmissions. 

26. The network access system of Claim 24, wherein the monitor control message 
specifies a threshold activity level. 

27. The network access system of Claim 2 1 , wherein: 
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the programmable access device comprises a policer; and 

the control message comprises a policer control message that specifies a 
configuration of the policer. 

28. The network access system of Claim 2 1 , wherein the control message 
comprises a forwarding table control message that specifies a configuration for a 
forwarding table. 

29. The network access system of Claim 2 1 , wherein: 

the programmable access device comprises one or more output buffers for 
outgoing packets and an associated scheduler; and 

the control message specifies a configuration of the scheduler and the one or 
more output buffers. 

30. The network access system of Claim 21, wherein: 

the programmable access device comprises a shaper; and 

the control message comprises a shaper control that specifies a configuration 
of the shaper. 

3 1 . The network access system of Claim 2 1 , wherein: 
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the control message specifies a source from which packets are not to be 
accepted; and 

the programmable access device comprises means for dropping packets from 
the specified source. 

32. The network access system of Claim 2 1 , said external processor comprising 
means, responsive to service processing by the external processor, for injecting a 
packet into packet flow through the programmable access device. 

33. The network access system of Claim 21 , wherein 

the control message comprises a session deletion control message; and 

the programmable access device comprises means for deleting a session 
specified by the session deletion control message. 

34. The network access system of Claim 21, wherein the external processor 
comprises a signaling processor that signals network hardware to establish a network 
connection in response to a message received from the programmable access device. 



35. The network access system of Claim 2 1 , said external processor and said 
programmable access device each comprising means for exchanging keepalive 
messages. 
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36. The network access system of Claim 21, wherein the external processor 
comprises a control processor that outputs said control message and an application 
programming interface through which said control processor is accessed. 

37. The network access system of Claim 21, said programmable access device 
comprising means, responsive to said control message, for sending an 
acknowledgement to said external processor. 

38. The network access system of Claim 21 , wherein: 

the external processor comprises a plurality of service controllers that 
provide service processing; and 

the programmable access device comprises means for communicating a 
state of a session to the external processor in response to failure of a service 
controller servicing the session. 

39. The network access system of Claim 21, and further comprising a network 
coupling the external processor and the programmable access device. 



